https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223835
--- Comment #34 from Andrey V. Elsukov <a...@freebsd.org> --- > (In reply to Felipe N. Oliva from comment #31) > > netstat -sp tcp | grep sig > > 0 packets with matching signature received > > 0 packets with bad signature received > > 0 times failed to make signature due to no SA > > 0 times unexpected signature received > > 0 times no signature provided by segment > > It seems there were not any attempt to use TCP-MD5, probably you need to > properly configure your BGP daemon. > When application wants to use TCP-MD5 signatures, it uses TCP_MD5SIG socket option to enable this feature. When socket has enabled this feature and no SAs are presents, or option is enabled and TCP segments have not such option there will be some counters incremented. In your case application did not enable this socket option, this is why I think about wrong configuration. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
